Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #142

Merged
merged 1 commit into from
May 2, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 1, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
ghcr.io/miracum/fhir-pseudonymizer patch v2.21.7 -> v2.21.9 age adoption passing confidence
ghcr.io/miracum/vfps patch v1.3.4 -> v1.3.5 age adoption passing confidence
io.micrometer:micrometer-core dependencies patch 1.12.4 -> 1.12.5 age adoption passing confidence
io.micrometer:micrometer-registry-prometheus dependencies patch 1.12.4 -> 1.12.5 age adoption passing confidence
org.springframework.boot plugin patch 3.2.4 -> 3.2.5 age adoption passing confidence

Release Notes

miracum/fhir-pseudonymizer (ghcr.io/miracum/fhir-pseudonymizer)

v2.21.9

Compare Source

Miscellaneous Chores

v2.21.8

Compare Source

Miscellaneous Chores
miracum/vfps (ghcr.io/miracum/vfps)

v1.3.5

Compare Source

Miscellaneous Chores
micrometer-metrics/micrometer (io.micrometer:micrometer-core)

v1.12.5: 1.12.5

⭐ New Features

  • Deprecate DefaultUriMapper and PoolingHttpClientConnectionManagerMetricsBinder in httpcomponents #​4862
  • Use same description for same meter name in Log4j2Metrics #​4864

🔨 Dependency Upgrades

  • Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.691 to 1.12.696 #​4926
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.8 to 1.7.11 #​4925
  • Bump com.signalfx.public:signalfx-java from 1.0.39 to 1.0.40 #​4907

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye


Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented Apr 1, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.04s
✅ DOCKERFILE hadolint 2 0 0.1s
✅ EDITORCONFIG editorconfig-checker 66 0 0.34s
✅ GROOVY npm-groovy-lint 2 0 10.47s
✅ JAVA checkstyle 18 0 5.25s
✅ JSON jsonlint 5 0 0.45s
✅ JSON prettier 5 0 2.76s
✅ JSON v8r 5 0 4.65s
✅ MARKDOWN markdownlint 2 0 0.76s
✅ PYTHON bandit 1 0 1.22s
✅ PYTHON black 1 0 0.68s
✅ PYTHON flake8 1 0 0.67s
✅ PYTHON isort 1 0 0.46s
✅ PYTHON mypy 1 0 8.66s
✅ PYTHON ruff 1 0 0.03s
✅ REPOSITORY checkov yes no 17.15s
✅ REPOSITORY gitleaks yes no 1.24s
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY grype yes no 14.26s
✅ REPOSITORY kics yes no 4.44s
✅ REPOSITORY secretlint yes no 1.25s
✅ REPOSITORY syft yes no 2.61s
✅ REPOSITORY trivy yes no 8.09s
✅ REPOSITORY trivy-sbom yes no 6.96s
✅ REPOSITORY trufflehog yes no 4.79s
✅ SQL sql-lint 1 0 0.35s
✅ XML xmllint 1 0 0.01s
✅ YAML prettier 17 0 1.29s
✅ YAML yamllint 17 0 0.67s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 86403e8 to 01bb917 Compare April 1, 2024 14:34
@renovate renovate bot changed the title chore(deps): update ghcr.io/miracum/fhir-pseudonymizer docker tag to v2.21.8 chore(deps): update all non-major dependencies Apr 1, 2024
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from c966ed3 to 00f9d58 Compare April 5, 2024 17:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 00f9d58 to c2e911b Compare April 8, 2024 16:06
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c2e911b to 185cb4d Compare April 18, 2024 20:16
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 653e185 to d9fb354 Compare May 2, 2024 08:09
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d9fb354 to dacf42f Compare May 2, 2024 08:13
Copy link

github-actions bot commented May 2, 2024

Target ghcr.io/miracum/fhir-gateway:pr-142 (debian 12.5)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2024-33599 HIGH 2.36-9+deb12u6
libc6 CVE-2024-33600 MEDIUM 2.36-9+deb12u6
libc6 CVE-2024-33601 MEDIUM 2.36-9+deb12u6
libc6 CVE-2024-33602 MEDIUM 2.36-9+deb12u6
libc6 CVE-2010-4756 LOW 2.36-9+deb12u6
libc6 CVE-2018-20796 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010022 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010023 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010024 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010025 LOW 2.36-9+deb12u6
libc6 CVE-2019-9192 LOW 2.36-9+deb12u6
libexpat1 CVE-2023-52425 HIGH 2.5.0-1
libexpat1 CVE-2023-52426 LOW 2.5.0-1
libexpat1 CVE-2024-28757 LOW 2.5.0-1
libgcc-s1 CVE-2023-4039 MEDIUM 12.2.0-14
libgcc-s1 CVE-2022-27943 LOW 12.2.0-14
libpng16-16 CVE-2021-4214 LOW 1.6.39-2
libstdc++6 CVE-2023-4039 MEDIUM 12.2.0-14
libstdc++6 CVE-2022-27943 LOW 12.2.0-14
libuuid1 CVE-2022-0563 LOW 2.38.1-5+deb12u1
zlib1g CVE-2023-45853 CRITICAL 1:1.2.13.dfsg-1

No Misconfigurations found

@chgl chgl merged commit 08602ee into master May 2, 2024
14 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch May 2, 2024 08:20
miracum-bot pushed a commit that referenced this pull request May 2, 2024
## [3.12.13](v3.12.12...v3.12.13) (2024-05-02)

### Bug Fixes

* set -XX:MaxRAMPercentage=70 ([#147](#147)) ([550313b](550313b))

### Build

* **deps:** bump idna from 3.4 to 3.7 in /tests/e2e ([#143](#143)) ([3febd78](3febd78))

### Miscellaneous Chores

* **deps:** update all non-major dependencies ([#142](#142)) ([08602ee](08602ee))
* **deps:** update docker.io/library/gradle:8.7.0-jdk21 docker digest to 01ec604 ([#144](#144)) ([633bf60](633bf60))
* **deps:** update gcr.io/distroless/java21-debian12:nonroot docker digest to 58f89bf ([#145](#145)) ([ff4f445](ff4f445))
* **deps:** update github-actions ([#146](#146)) ([792582e](792582e))
@miracum-bot
Copy link

🎉 This PR is included in version 3.12.13 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants